blob: 65af9a07cf766b3fe0309149cd46fcc6495aaffb [file] [log] [blame]
Eric W. Biederman5f256be2007-09-12 11:50:50 +02001/*
2 * Operations on the network namespace
3 */
4#ifndef __NET_NET_NAMESPACE_H
5#define __NET_NET_NAMESPACE_H
6
7#include <asm/atomic.h>
8#include <linux/workqueue.h>
9#include <linux/list.h>
10
Pavel Emelyanov8efa6e92008-03-31 19:41:14 -070011#include <net/netns/core.h>
Pavel Emelyanov852566f2008-07-18 04:01:24 -070012#include <net/netns/mib.h>
Denis V. Luneva0a53c82007-12-11 04:19:17 -080013#include <net/netns/unix.h>
Denis V. Lunev2aaef4e2007-12-11 04:19:54 -080014#include <net/netns/packet.h>
Pavel Emelyanov8afd3512007-12-16 13:29:36 -080015#include <net/netns/ipv4.h>
Daniel Lezcanob0f159d2008-01-10 02:49:06 -080016#include <net/netns/ipv6.h>
Pavel Emelyanov67019cc2008-04-13 22:28:42 -070017#include <net/netns/dccp.h>
Alexey Dobriyan8d870052008-01-31 04:02:13 -080018#include <net/netns/x_tables.h>
Alexey Dobriyandfdb8d72008-10-08 11:35:02 +020019#if defined(CONFIG_NF_CONNTRACK) || defined(CONFIG_NF_CONNTRACK_MODULE)
20#include <net/netns/conntrack.h>
21#endif
Alexey Dobriyand62ddc22008-11-25 17:14:31 -080022#include <net/netns/xfrm.h>
Denis V. Luneva0a53c82007-12-11 04:19:17 -080023
Eric W. Biederman457c4cb2007-09-12 12:01:34 +020024struct proc_dir_entry;
Eric W. Biederman2774c7a2007-09-26 22:10:56 -070025struct net_device;
Denis V. Lunev97c53ca2007-11-19 22:26:51 -080026struct sock;
Pavel Emelyanov1597fbc2007-12-01 23:51:01 +110027struct ctl_table_header;
Pavel Emelyanovdec827d2008-04-15 00:36:08 -070028struct net_generic;
Johannes Berg134e6372009-07-10 09:51:34 +000029struct sock;
Pavel Emelyanov1597fbc2007-12-01 23:51:01 +110030
Eric Dumazet7c28bd02009-10-24 06:13:17 -070031
32#define NETDEV_HASHBITS 8
33#define NETDEV_HASHENTRIES (1 << NETDEV_HASHBITS)
34
Eric W. Biederman5f256be2007-09-12 11:50:50 +020035struct net {
36 atomic_t count; /* To decided when the network
37 * namespace should be freed.
38 */
Denis V. Lunev5d1e4462008-04-16 01:58:04 -070039#ifdef NETNS_REFCNT_DEBUG
Eric W. Biederman5f256be2007-09-12 11:50:50 +020040 atomic_t use_count; /* To track references we
41 * destroy on demand
42 */
Denis V. Lunev5d1e4462008-04-16 01:58:04 -070043#endif
Eric Dumazet8e602ce2010-10-14 05:56:18 +000044 spinlock_t rules_mod_lock;
45
Eric W. Biederman5f256be2007-09-12 11:50:50 +020046 struct list_head list; /* list of network namespaces */
Eric W. Biederman2b035b32009-11-29 22:25:27 +000047 struct list_head cleanup_list; /* namespaces on death row */
Eric W. Biederman72ad9372009-12-03 02:29:03 +000048 struct list_head exit_list; /* Use only net_mutex */
Eric W. Biederman457c4cb2007-09-12 12:01:34 +020049
50 struct proc_dir_entry *proc_net;
51 struct proc_dir_entry *proc_net_stat;
Eric W. Biederman881d9662007-09-17 11:56:21 -070052
Al Viro73455092008-07-14 21:22:20 -040053#ifdef CONFIG_SYSCTL
54 struct ctl_table_set sysctls;
55#endif
Eric W. Biederman95bdfcc2007-11-30 23:55:42 +110056
Eric Dumazet8e602ce2010-10-14 05:56:18 +000057 struct sock *rtnl; /* rtnetlink socket */
58 struct sock *genl_sock;
Eric W. Biederman2774c7a2007-09-26 22:10:56 -070059
Eric W. Biederman881d9662007-09-17 11:56:21 -070060 struct list_head dev_base_head;
61 struct hlist_head *dev_name_head;
62 struct hlist_head *dev_index_head;
Denis V. Lunev97c53ca2007-11-19 22:26:51 -080063
Denis V. Lunev5fd30ee2008-01-10 03:20:28 -080064 /* core fib_rules */
65 struct list_head rules_ops;
Denis V. Lunev5fd30ee2008-01-10 03:20:28 -080066
Denis V. Lunevd12d01d2007-11-19 22:28:35 -080067
Eric Dumazet8e602ce2010-10-14 05:56:18 +000068 struct net_device *loopback_dev; /* The loopback */
Pavel Emelyanov8efa6e92008-03-31 19:41:14 -070069 struct netns_core core;
Pavel Emelyanov852566f2008-07-18 04:01:24 -070070 struct netns_mib mib;
Denis V. Lunev2aaef4e2007-12-11 04:19:54 -080071 struct netns_packet packet;
Denis V. Luneva0a53c82007-12-11 04:19:17 -080072 struct netns_unix unx;
Pavel Emelyanov8afd3512007-12-16 13:29:36 -080073 struct netns_ipv4 ipv4;
Daniel Lezcanob0f159d2008-01-10 02:49:06 -080074#if defined(CONFIG_IPV6) || defined(CONFIG_IPV6_MODULE)
75 struct netns_ipv6 ipv6;
76#endif
Pavel Emelyanov67019cc2008-04-13 22:28:42 -070077#if defined(CONFIG_IP_DCCP) || defined(CONFIG_IP_DCCP_MODULE)
78 struct netns_dccp dccp;
79#endif
Alexey Dobriyan8d870052008-01-31 04:02:13 -080080#ifdef CONFIG_NETFILTER
81 struct netns_xt xt;
Alexey Dobriyandfdb8d72008-10-08 11:35:02 +020082#if defined(CONFIG_NF_CONNTRACK) || defined(CONFIG_NF_CONNTRACK_MODULE)
83 struct netns_ct ct;
84#endif
Alexey Dobriyancd8c20b2010-01-13 16:02:14 +010085 struct sock *nfnl;
86 struct sock *nfnl_stash;
Alexey Dobriyan8d870052008-01-31 04:02:13 -080087#endif
Johannes Berg3d23e342009-09-29 23:27:28 +020088#ifdef CONFIG_WEXT_CORE
Johannes Bergb333b3d222009-06-24 01:34:48 +000089 struct sk_buff_head wext_nlevents;
90#endif
Pavel Emelyanovdec827d2008-04-15 00:36:08 -070091 struct net_generic *gen;
Eric Dumazet8e602ce2010-10-14 05:56:18 +000092
93 /* Note : following structs are cache line aligned */
94#ifdef CONFIG_XFRM
95 struct netns_xfrm xfrm;
96#endif
Eric W. Biederman5f256be2007-09-12 11:50:50 +020097};
98
Denis V. Lunev225c0a02008-04-02 00:09:29 -070099
Denis V. Lunevc0f39322008-04-02 00:10:28 -0700100#include <linux/seq_file_net.h>
101
Daniel Lezcano4fabcd72007-09-13 09:16:29 +0200102/* Init's network namespace */
Eric W. Biederman5f256be2007-09-12 11:50:50 +0200103extern struct net init_net;
Denis V. Luneva4aa8342008-04-03 13:04:33 -0700104
105#ifdef CONFIG_NET
Eric W. Biederman9dd776b2007-09-26 22:04:26 -0700106extern struct net *copy_net_ns(unsigned long flags, struct net *net_ns);
Denis V. Lunev225c0a02008-04-02 00:09:29 -0700107
108#else /* CONFIG_NET */
Eric W. Biederman9dd776b2007-09-26 22:04:26 -0700109static inline struct net *copy_net_ns(unsigned long flags, struct net *net_ns)
110{
111 /* There is nothing to copy so this is a noop */
112 return net_ns;
113}
Denis V. Lunev225c0a02008-04-02 00:09:29 -0700114#endif /* CONFIG_NET */
115
116
117extern struct list_head net_namespace_list;
Eric W. Biederman9dd776b2007-09-26 22:04:26 -0700118
Johannes Berg30ffee82009-07-10 09:51:35 +0000119extern struct net *get_net_ns_by_pid(pid_t pid);
120
Pavel Emelyanovd4655792007-11-01 00:43:49 -0700121#ifdef CONFIG_NET_NS
Eric W. Biederman5f256be2007-09-12 11:50:50 +0200122extern void __put_net(struct net *net);
123
124static inline struct net *get_net(struct net *net)
125{
126 atomic_inc(&net->count);
127 return net;
128}
129
Eric W. Biederman077130c2007-09-13 09:18:57 +0200130static inline struct net *maybe_get_net(struct net *net)
131{
132 /* Used when we know struct net exists but we
133 * aren't guaranteed a previous reference count
134 * exists. If the reference count is zero this
135 * function fails and returns NULL.
136 */
137 if (!atomic_inc_not_zero(&net->count))
138 net = NULL;
139 return net;
140}
141
Eric W. Biederman5f256be2007-09-12 11:50:50 +0200142static inline void put_net(struct net *net)
143{
144 if (atomic_dec_and_test(&net->count))
145 __put_net(net);
146}
147
YOSHIFUJI Hideaki878628f2008-03-26 03:57:35 +0900148static inline
149int net_eq(const struct net *net1, const struct net *net2)
150{
151 return net1 == net2;
152}
Pavel Emelyanovd4655792007-11-01 00:43:49 -0700153#else
Eric W. Biedermanb9f75f42008-06-20 22:16:51 -0700154
Pavel Emelyanovd4655792007-11-01 00:43:49 -0700155static inline struct net *get_net(struct net *net)
156{
157 return net;
158}
159
160static inline void put_net(struct net *net)
161{
162}
163
Pavel Emelyanovd4655792007-11-01 00:43:49 -0700164static inline struct net *maybe_get_net(struct net *net)
165{
166 return net;
167}
YOSHIFUJI Hideaki878628f2008-03-26 03:57:35 +0900168
169static inline
170int net_eq(const struct net *net1, const struct net *net2)
171{
172 return 1;
173}
Pavel Emelyanovd4655792007-11-01 00:43:49 -0700174#endif
Eric W. Biederman5f256be2007-09-12 11:50:50 +0200175
Denis V. Lunev5d1e4462008-04-16 01:58:04 -0700176
177#ifdef NETNS_REFCNT_DEBUG
178static inline struct net *hold_net(struct net *net)
179{
180 if (net)
181 atomic_inc(&net->use_count);
182 return net;
183}
184
185static inline void release_net(struct net *net)
186{
187 if (net)
188 atomic_dec(&net->use_count);
189}
190#else
191static inline struct net *hold_net(struct net *net)
192{
193 return net;
194}
195
196static inline void release_net(struct net *net)
197{
198}
199#endif
200
Eric Dumazet8f424b52008-11-12 00:53:30 -0800201#ifdef CONFIG_NET_NS
202
203static inline void write_pnet(struct net **pnet, struct net *net)
204{
205 *pnet = net;
206}
207
208static inline struct net *read_pnet(struct net * const *pnet)
209{
210 return *pnet;
211}
212
213#else
214
215#define write_pnet(pnet, net) do { (void)(net);} while (0)
216#define read_pnet(pnet) (&init_net)
217
218#endif
Denis V. Lunev5d1e4462008-04-16 01:58:04 -0700219
Eric W. Biederman5f256be2007-09-12 11:50:50 +0200220#define for_each_net(VAR) \
221 list_for_each_entry(VAR, &net_namespace_list, list)
222
Johannes Berg11a28d32009-07-10 09:51:33 +0000223#define for_each_net_rcu(VAR) \
224 list_for_each_entry_rcu(VAR, &net_namespace_list, list)
225
Pavel Emelyanov46650792007-10-08 20:38:39 -0700226#ifdef CONFIG_NET_NS
227#define __net_init
228#define __net_exit
Denis V. Lunev022cbae2007-11-13 03:23:50 -0800229#define __net_initdata
Pavel Emelyanov46650792007-10-08 20:38:39 -0700230#else
231#define __net_init __init
232#define __net_exit __exit_refok
Denis V. Lunev022cbae2007-11-13 03:23:50 -0800233#define __net_initdata __initdata
Pavel Emelyanov46650792007-10-08 20:38:39 -0700234#endif
Eric W. Biederman5f256be2007-09-12 11:50:50 +0200235
236struct pernet_operations {
237 struct list_head list;
238 int (*init)(struct net *net);
239 void (*exit)(struct net *net);
Eric W. Biederman72ad9372009-12-03 02:29:03 +0000240 void (*exit_batch)(struct list_head *net_exit_list);
Eric W. Biedermanf875bae2009-11-29 22:25:28 +0000241 int *id;
242 size_t size;
Eric W. Biederman5f256be2007-09-12 11:50:50 +0200243};
244
Eric W. Biederman17edde52009-02-22 00:11:09 -0800245/*
246 * Use these carefully. If you implement a network device and it
247 * needs per network namespace operations use device pernet operations,
248 * otherwise use pernet subsys operations.
249 *
Johannes Berg4edf5472009-07-15 06:16:34 +0000250 * Network interfaces need to be removed from a dying netns _before_
251 * subsys notifiers can be called, as most of the network code cleanup
252 * (which is done from subsys notifiers) runs with the assumption that
253 * dev_remove_pack has been called so no new packets will arrive during
254 * and after the cleanup functions have been called. dev_remove_pack
255 * is not per namespace so instead the guarantee of no more packets
256 * arriving in a network namespace is provided by ensuring that all
257 * network devices and all sockets have left the network namespace
258 * before the cleanup methods are called.
Eric W. Biederman17edde52009-02-22 00:11:09 -0800259 *
260 * For the longest time the ipv4 icmp code was registered as a pernet
261 * device which caused kernel oops, and panics during network
262 * namespace cleanup. So please don't get this wrong.
263 */
Eric W. Biederman5f256be2007-09-12 11:50:50 +0200264extern int register_pernet_subsys(struct pernet_operations *);
265extern void unregister_pernet_subsys(struct pernet_operations *);
266extern int register_pernet_device(struct pernet_operations *);
267extern void unregister_pernet_device(struct pernet_operations *);
Eric W. Biedermanf875bae2009-11-29 22:25:28 +0000268
Eric W. Biederman95bdfcc2007-11-30 23:55:42 +1100269struct ctl_path;
270struct ctl_table;
271struct ctl_table_header;
Pavel Emelyanovd62c6122008-05-19 13:45:33 -0700272
Eric W. Biederman95bdfcc2007-11-30 23:55:42 +1100273extern struct ctl_table_header *register_net_sysctl_table(struct net *net,
274 const struct ctl_path *path, struct ctl_table *table);
Pavel Emelyanovd62c6122008-05-19 13:45:33 -0700275extern struct ctl_table_header *register_net_sysctl_rotable(
276 const struct ctl_path *path, struct ctl_table *table);
Eric W. Biederman95bdfcc2007-11-30 23:55:42 +1100277extern void unregister_net_sysctl_table(struct ctl_table_header *header);
278
Eric W. Biederman5f256be2007-09-12 11:50:50 +0200279#endif /* __NET_NET_NAMESPACE_H */